Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa
File:                     37342e3132302e3132302e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          T5BFntu9XSCvnjtI/70nC+mhewJJxaNeNNwM5vOSSCc=
Subject key identifier:   1F:10:4E:7A:2C:3E:C5:40:3A:EB:7E:FB:95:C5:71:32:B2:B8:C1:C8
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       75502B40D8689A1818589DF93616AAC9F5B52926
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Dec 2023 20:01:12 +0000
ROA not before:           Fri 22 Dec 2023 19:56:12 +0000
ROA not after:            Fri 20 Dec 2024 20:01:12 +0000
asID:                     8888
IP address blocks:        74.120.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:50:2b:40:d8:68:9a:18:18:58:9d:f9:36:16:aa:c9:f5:b5:29:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Dec 22 19:56:12 2023 GMT
            Not After : Dec 20 20:01:12 2024 GMT
        Subject: CN=1F104E7A2C3EC5403AEB7EFB95C57132B2B8C1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:15:80:3d:10:82:8b:b9:11:b2:3c:9f:d6:
                    85:16:3f:22:43:2f:8b:00:73:ec:52:6f:48:66:d7:
                    58:13:94:14:6b:9c:44:b4:bf:1f:7f:19:c7:bb:e4:
                    12:7b:17:ba:cd:7e:f2:b4:48:9b:3f:ac:be:4a:c3:
                    1e:fe:4a:ca:08:48:bb:72:75:ad:a0:50:bb:eb:c1:
                    bc:05:b2:d4:91:98:6c:d1:60:d2:32:6d:9c:9b:21:
                    79:c7:c8:dd:70:5d:13:32:d3:13:12:ae:94:28:4b:
                    4d:5f:d1:1b:51:18:65:03:c7:28:a7:4c:2c:3e:48:
                    eb:7c:07:59:35:f9:2f:ac:17:e8:fa:d6:4e:e2:47:
                    cd:a3:99:cf:a3:86:58:f7:a3:b6:0e:40:41:39:f5:
                    6d:40:26:a8:03:4c:d5:a4:6c:12:1f:3e:00:78:60:
                    8c:02:57:58:b5:a0:a4:af:11:14:c0:3a:24:9a:e6:
                    b8:1b:31:1a:8f:a8:96:6b:9c:ab:9c:52:ee:29:09:
                    de:33:c0:9c:53:03:e6:1b:99:73:b3:98:27:b8:ca:
                    ca:9b:d3:c2:fd:31:d7:15:b8:ce:b0:b6:40:ac:a9:
                    70:d0:c7:82:83:88:15:e9:c8:0a:b5:1f:d5:bd:f2:
                    c5:63:d1:26:24:33:b2:dc:d8:62:dd:aa:24:64:41:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:10:4E:7A:2C:3E:C5:40:3A:EB:7E:FB:95:C5:71:32:B2:B8:C1:C8
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:1f:d0:1b:b3:07:61:d0:14:6b:d6:1d:9f:45:fa:5d:46:
         8f:b9:3e:82:e3:b7:54:5a:11:f2:e1:76:e4:3c:47:e2:12:9b:
         61:18:55:0b:f2:3f:16:c3:59:34:9b:fa:a9:06:a1:63:4d:b0:
         8a:94:ca:b2:27:47:8e:c7:d3:6c:34:94:c6:ee:a1:c5:56:2b:
         fc:b0:28:8f:10:6c:57:c1:3f:ca:76:94:52:e3:23:70:80:ff:
         4a:db:6c:99:3f:2a:7e:65:05:4d:ec:d1:74:9b:3e:08:3a:22:
         f5:96:76:c3:04:2a:21:39:f2:47:c3:12:27:af:55:6a:d3:b0:
         8e:d9:aa:42:5e:80:98:a2:5c:6b:5a:97:fc:c9:8a:55:c9:03:
         81:e3:87:f1:b5:57:a0:a7:11:b7:42:b4:f8:a6:05:e7:2f:56:
         9c:b5:23:6c:18:39:da:19:71:01:27:6d:50:7a:c4:1f:09:78:
         8f:c8:e8:cd:8d:5c:0f:00:d1:b7:b8:98:e7:91:b9:50:ee:3e:
         c1:03:ac:10:11:88:53:68:1b:24:d9:b0:0d:3f:21:31:c2:e9:
         09:8b:0d:f3:a7:89:af:16:1c:66:d1:02:2d:23:56:83:c1:47:
         5f:40:ec:65:c2:56:90:0a:c6:0c:1c:1f:6b:3a:20:83:c8:c3:
         66:11:e1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org